Sprimoglass listed on 8base ransomware leak site

• Ransomware group: 8base
• Country: Belgium
• Sector: Manufacturing
• Announcement date: March 12, 2024

Sprimoglass targeted by 8base ransomware group

The Belgian manufacturing company Sprimoglass has been listed on the leak site of the 8base ransomware group. According to the announcement made on March 12, 2024, the threat actor group claims to have successfully targeted the organization, marking a new incident involving the group's operations.

The claimed attack and extortion strategy

The 8base group claims to have obtained data belonging to Sprimoglass and has subsequently published this information on its dedicated leak platform. The announcement indicates that various files, allegedly obtained from the company's servers, are involved in this breach. This listing occurred on March 13, 2024, and it appears the group intends to exert pressure on the company using a double-extortion strategy.

Double extortion is a common tactic used by modern ransomware groups. In this method, attackers do not merely encrypt a victim's systems to disrupt operations; they also steal sensitive information before the encryption process begins. The attackers then threaten to leak this stolen data on public forums or leak sites if the ransom is not paid. This approach allows cybercriminals to exert pressure through the threat of reputational damage and legal consequences, even if the victim has robust backups to restore their systems.

It is worth noting that the 8base group, whose infrastructure was disrupted in early 2025, appears to be attempting to continue its activities through such actions. This demonstrates the resilience and persistence often seen in ransomware-as-a-service (RaaS) models and organized cybercrime groups.

Data types involved in the leak

While the specific volume of data and the exact number of files have not been disclosed, the leak announcement specifies several categories of sensitive information that were allegedly obtained from the organization. The following items are listed as being part of the breach:

• Invoices
• Receipts
• Accounting documents
• Personal data
• Certificates
• Employment contracts
• Confidentiality agreements
• Personal files

The presence of such diverse documentation suggests a broad compromise of the organization's internal administrative and human resources data.

About Sprimoglass

Sprimoglass is a Belgium-based company that has been active in the processing of flat glass for over 130 years. It provides various glass solutions for residential and commercial buildings.

Potential risks and organizational impact

The claim against Sprimoglass may pose significant secondary risks for the organization. For the company's employees and customers, the exposure of personal data, employment contracts, and personal files could lead to identity theft or targeted phishing attacks. When personal information is leaked, attackers often use it to craft highly convincing social engineering campaigns, making it harder for individuals to distinguish between legitimate communications and fraudulent ones.

Furthermore, as a Belgium-based entity, the leaked data may fall under the scope of the General Data Protection Regulation (GDPR). This regulatory framework imposes strict requirements on how personal data must be protected, and a breach of this nature could potentially lead to administrative sanctions for the company. Such regulatory scrutiny often follows significant data leaks involving personal information.

The double-extortion method employed by the 8base group may negatively impact the company's operational continuity and reputation through the threat of data publication. To mitigate such risks, it is generally considered important for organizations to review their data security processes and notify the affected parties. Strengthening defensive postures through regular security audits, implementing strict access controls, and ensuring robust encryption for data at rest and in transit are common industry practices to defend against these types of threats.